glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
- Severity:
- High
Description
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
Recommendation
Update the glob-parent package to the latest compatible version. Followings are version details:
- Affected version(s): >= 4.0.0, < 5.1.2
- Patched version(s): 5.1.2
References
Related Issues
- glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service - CVE-2021-35065
- Regular expression denial of service in url-regex - CVE-2020-7661
- is_js vulnerable to Regular Expression Denial of Service - CVE-2020-26302
- insane vulnerable to Regular Expression Denial of Service - CVE-2020-26303
You might also like:
- Tags:
- npm
- glob-parent
Anything's wrong? Let us know Last updated on June 27, 2024